# Prying Eyes

**Category:** Database

**Points:** 55

## Description

\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/prying_eyes.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
\<sup>Created By: \<code>@syyntax\</code>\</sup>

Aurora Health logs every time a staff member opens a patient chart. Someone was watching the VIP a little too closely. Find the user account that accessed the VIP patient's chart more times than any other account, and report their username.

You'll need the VIP's MRN first from **Admitted Under Another Name**. The audit log references patients by that same MRN.

Use the provided MySQL shell.

Submit the username as deadface{username}. Example: deadface{jsmith}.

[Access Database](https://aurora.dctf.io)

## Services

- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
- [https://aurora.dctf.io)](https://aurora.dctf.io))